A developer has created Babyshark, a terminal-based interface for analyzing PCAP files that aims to make network traffic analysis accessible to users intimidated by Wireshark. The tool provides a flows-first approach with an overview dashboard that answers "what's happening" and suggests what to click next. Users can drill down from domains to flows to packets with plain-English explanations.

Babyshark works offline with .pcap and .pcapng files without requiring Wireshark, though live capture needs the tshark CLI. The interface includes specialized views for domains (prioritizing hostnames), "weird stuff" that surfaces common failure and latency signals like retransmits and handshake issues, and packet streams with search functionality. The tool features bookmarking, markdown report export, and keybindings optimized for keyboard navigation.

Currently at v0.1.0 alpha, Babyshark is built in Rust and available for download from GitHub releases or via cargo install. The developer seeks feedback on UX improvements and requests suggestions for additional "weird detectors" to include in future versions. The project represents an attempt to democratize network analysis by providing a more approachable interface for examining network traffic patterns and troubleshooting connectivity issues.